How to remove Retailer_prog[1].exe
- File Details
- Overview
- Analysis
Retailer_prog[1].exe
The module Retailer_prog[1].exe has been detected as Ransom.Wacatac
File Details
Product Name: |
|
MD5: |
a179157d1357aa50d0779bea5b0e9f49 |
Size: |
8 MB |
First Published: |
2024-05-07 23:01:48 (a year ago) |
Latest Published: |
2024-05-07 23:01:49 (a year ago) |
Status: |
Ransom.Wacatac (on last analysis) |
|
Analysis Date: |
2024-05-07 23:01:49 (a year ago) |
%localappdata%\microsoft\windows\inetcache\ie |
%localappdata% |
%localappdata%\microsoft\windows\inetcache\ie |
%temp% |
%mydoc% |
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x00e70266 |
Name |
Size of data |
MD5 |
.text |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.rdata |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.data |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.vmp¨Ž |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.vmp¨Ž |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.vmp¨Ž |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.vmpr#/% |
0 |
d41d8cd98f00b204e9800998ecf8427e |
.vmpr#/% |
9228800 |
26da3ce5fb8df8974ec15c32d7ea26ba |
.reloc |
2048 |
952a38199e126c7f4030a20fbd7685f9 |
.rsrc |
120320 |
2fdb722ce19b184b57ad48c9b25939ff |